标题: X-Cart Gold 4.5 (products_map.php symb parameter) XSS Vulnerability
作者 muts
影响版本: X-Cart Gold 4.5
开发者地址: http://www.x-cart.com/
概要： 
X-Cart Gold implements a degree of XSS filtering but it is incomplete.
The "symb" parameter of "products_map.php" is vulnerable to XSS and can be bypassed by using
HTML anchor methods and URL encoding.
  
测试方法 
http://www.2cto.com /xcart/products_map?symb=%22%20onmousemove=javascript:eval%28unescape%28%26quot%3balert%28%22xss%22%29%3B%26quot%3B%29%29%3EAAAAAA